https://online.eastern.bank/: 1) They sent email to my new address notifying me about the address change but not to my old address. Significant security issue. 2) They didn't require any sort of confirmation from me from the new address. 3) Less important but annoying and sloppy: the confirmation code email to initiate the change had tabs inside the <span> containing the code, so when I double-clicked, copied, and pasted, the tabs ended up in the paste so it didn't work. #ChangeOfAddress 🧵
(APC email address change continued) * I did *not* receive the code they claimed to be sending me for me to enter to change my address. I've done many of these address changes, and truly, this one is by far the worst. #ChangeOfAddress 🧵
Apple won't let me use an addy.io email address as the address on my Apple ID account. On the one hand, I kind of get that, and on the other hand, f*ck you Apple let me have privacy if I want privacy. #ChangeOfAddress 🧵
It's impossible to change your email address in the Bill.com AP/AR app (https://login.us.bill.com/neo/login). Their help page about this literally says that you have to create a new account with the new address, deactivate the old account, and notify every single entity sending you payments or invoices to switch to the new address. This is some serious 🤡 stuff. #smdh #ChangeOfAddress 🧵
When I created my https://www.airvoicewireless.com/ account in 2018, my username was my email address. However, when I went to log into this dormant account today, it demanded my account number or phone number, neither of which I know, as the username. I was therefore unable to log in and unable to remove my email address from their system; I removed the account from my password manager, and if I ever end up using them again in the future I'll create a new account. #ChangeOfAddress 🧵
I haven't logged into https://eftps.gov/ (Electronic Federal Tax Payment System) for a long time, but I tried to do so today to change my address. It asked me to log in using ID.me or login.gov, which was new. After I logged in with login.gov it brought me to the old login screen I remembered. I entered the correct info there, and it said it was wrong. I tried the password recovery page, and it said the info I entered was wrong. I guess maybe my account was deleted? 🤷 #ChangeOfAddress 🧵
I changed my email address on a Workday job board, and there were issues with the notifications: * Both emails claim there will be a link following the text "Link:". There isn't. * The formatting (right padding) of the email is screwed up. * "You will not be able to reset your password during this 2 hour verification window," so if someone really has tried to change your address without authorization, you can't reset your password! 🤡 #ChangeOfAddress 🧵
When I was with a previous health insurance company I participated in a "wellness program" run by a company called Bravo Wellness. I still have an account on their web site, but since I'm no longer eligible to participate in the program, when I log into it all I see is a page saying I'm not currently eligible. They have no posted privacy policy, no way to request the deletion of my data, and no way for me to edit my account to change my email address. #ChangeOfAddress 🧵
I changed my email address in the Athena Health patient portal. A message there said that after changing my address I wouldn't be able to "log into this page again" until I was reregistered and they would send me instructions. And indeed, now I can't log in at all with the new address and when I log in with the old address my profile doesn't come up. But I haven't received any instructions. Is it a bug, or do I have to wait until somebody in the office sends it by hand? 🤷 #ChangeOfAddress 🧵
I like Amica, but I have to say that https://amica.com/ was a mess. I was able to change my email address without any verification required at the new address or notification sent to the old one. However, although my "login ID" (a.k.a. username) is my email address, it's _separate_ from the email address and I couldn't change it. To get it changed, I had to live chat with customer service. (continued) #ChangeOfAddress 🧵
I ended up deciding not to randomize my email address at https://box.com/ because the email address is the sharing key for collaborators and that would be too confusing. But while I was there I noticed a few unfortunate things worth mentioning about the site. First, this banner appears on free accounts, but in fact free accounts have access to 2-factor authentication, as they absolutely should. (continued) #ChangeOfAddress 🧵
At https://sis.mybps.org/, when I tried to log in I was told, "This account has been disabled." It's been six years since I had a kid at BPS, so it makes sense for them to disable the account. However, this means that they have my old email address, which I'm trying to eradicate from everywhere, in their database, and there's no way for me to remove it. #ChangeOfAddress 🧵
At https://app.cobalt.io/—an infosec company no less!—there's no visible way for me to change the email address on my account and I couldn't find any instructions on the web for how to do it. Also, allow me to take this opportunity to decry, not for the first time, how shitty infosec companies are at infosec: (continued) #ChangeOfAddress 🧵
https://app.cobalt.io/ shittiness, continued: * They've added recovery code functionality since I set up my account, but rather than just letting me generate a recovery code they're telling me I have to turn 2FA off and turn it back on to generate one. This is just an incredibly lazy, user-hostile implementation. #ChangeOfAddress 🧵
I decided rather than changing my email address at https://amilia.com/, I would just delete the account. I clicked "Delete my profile" under account settings. It popped up a confirmation dialog, and I clicked "Delete". The dialog disappeared with no indication of success. I tried it again to make sure I hadn't missed anything, and again, nothing. Then, about 30 seconds later, I got 2 automated emails asking me to confirm the account deletion. Really poor UX here! #ChangeOfAddress 🧵
On https://change.org/, I created my account so long ago that the email address I was using then was my [username]@[name].[town].ma.us address. I just tried to log in using that address, and the site showed me the error below. This is 100% a "valid personal email address." This error is some serious 🤡 shit. #ChangeOfAddress 🧵
My health insurance company (at least until the next open enrollment period), GEHA, doesn't allow the email address used for login to be changed without contacting customer service on the phone. 😠 🤡 #ChangeOfAddress 🧵
I tried to log into my old https://chase.com/ account to change my email address there; I still have an account even though I don't have a Chase credit card anymore. But after entering my username and password it said, "We've locked your account due to unusual activity. Please call # for assistance." Yeah, no, I'm not about to try to explain to a customer service droid, "I don't actually have a Chase card anymore, I just want to change the email address on my account." 😝 #ChangeOfAddress 🧵
https://actionnetwork.org/ allowed me to change my email address without sending a notification to the old address or a verification email to the new address. Awesome! Not. #ChangeOfAddress 🧵
(https://costco.com/ continued) Why are they asking me to verify my OLD email address? What if I no longer have access to it, and that's why I'm changing it? Why are they asking me to verify my identity when I just logged in with my password literally 30 seconds ago? Finally, they didn't ask me to verify my NEW email address after I changed it! Absolutely ridiculous. The product managers and engineers who designed this workflow are incompetent. #ChangeOfAddress 🧵
he/hisDigital Services Expert at #USDS (https://usds.gov/), detailed to #VA.I work primarily in #infosec, #IT, and #SaaS infrastructure. Prior to USDS, I was a #tech #startup #CISO.Dad, old-school hacker, Righteous Indignation Man. Opinions are my own. You can follow my blog from the Fediverse via @jikblog.#MaskUp #COVID #CovidIsNotOver #USPol #MAPol #BosPoli #Boston #MA #politics #resist #linux #FOSS #OpenSource #ConsumerActivism #privacy #programmer #hacker #fedi22